Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
File:                     7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json)
Hash identifier:          QhV/UMSQ+VDsHeyDnIxFKVUXhkDcR5ov5N9DjIlQ7NE=
Subject key identifier:   B4:42:06:56:F9:04:35:89:77:1E:C8:55:F7:A4:1C:9D:E0:F1:7D:41
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Certificate issuer:       /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial:       6122EA59DF3EDE81269F9F9A48BBF512D181EDF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
Manifest number:          1E
Signing time:             Fri 31 Jan 2025 06:01:56 +0000
Manifest this update:     Fri 31 Jan 2025 05:56:56 +0000
Manifest next update:     Sat 01 Feb 2025 08:58:56 +0000
Files and hashes:         1: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: 35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=)
                          2: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: t1PbIJs4UvsOHK4zMoJTVRkTOAZvzU34rS9WsHmPPtg=)
                          3: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: dnueVLcMDgoZGxfW5fVwhKVaVsjCcpgjMDDR39mpiEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:ea:59:df:3e:de:81:26:9f:9f:9a:48:bb:f5:12:d1:81:ed:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Validity
            Not Before: Jan 31 05:56:56 2025 GMT
            Not After : Feb  1 08:58:56 2025 GMT
        Subject: CN=B4420656F9043589771EC855F7A41C9DE0F17D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:41:fe:8f:c3:20:80:c8:eb:62:66:f2:7c:
                    5a:1f:51:d9:c0:7d:03:0f:26:c4:19:f1:fc:65:54:
                    55:07:b0:8a:33:cc:a5:4b:b6:99:12:70:fc:cc:ea:
                    0d:db:c8:40:7e:d9:80:f7:74:93:a7:20:01:76:09:
                    75:d8:51:58:de:9b:43:d5:03:eb:20:a9:ce:3d:09:
                    99:3c:55:22:b9:07:7f:73:81:c7:6f:bb:a9:8f:83:
                    39:e3:7d:7d:15:b8:93:63:db:33:00:f5:72:48:96:
                    59:a4:e6:df:71:17:32:45:a9:f7:29:9a:93:80:f9:
                    86:52:60:d1:dd:04:0b:e9:36:75:e4:2c:67:9a:a1:
                    d7:16:75:a7:da:4b:28:d2:77:a9:b1:16:7f:c0:17:
                    50:42:bf:bf:b3:6d:58:e6:09:7e:e0:cb:6c:d1:57:
                    d1:4d:c1:e1:9a:f7:fa:06:8f:b0:30:ae:ae:7c:2d:
                    0a:ee:99:da:88:73:80:38:ff:4d:31:8c:60:da:f7:
                    6c:3f:74:09:99:82:8b:f5:2b:7a:16:55:26:f7:c1:
                    8e:0f:c3:7f:01:70:49:fd:31:46:40:59:6d:fe:37:
                    56:ac:11:b2:07:cf:5f:e9:ec:76:7f:f6:ad:d9:f5:
                    b2:3b:82:76:25:69:73:ca:2c:ea:ed:a9:c1:32:d7:
                    43:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:06:56:F9:04:35:89:77:1E:C8:55:F7:A4:1C:9D:E0:F1:7D:41
            X509v3 Authority Key Identifier:
                keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:c3:9d:91:40:93:95:5d:ca:35:ea:b4:4e:46:99:58:e5:
         eb:3a:b8:af:c6:2f:cb:47:fa:b6:0e:a5:3c:4c:35:1e:9b:73:
         01:80:2b:47:14:80:3e:1c:1d:03:fc:15:3a:93:48:1b:2a:f5:
         4d:21:09:9d:0a:c5:72:95:af:a0:83:d6:ec:5a:f8:f9:ca:6c:
         ae:09:c9:bd:4e:b0:50:68:7e:fc:30:bf:0d:7a:38:f9:11:f7:
         a4:f6:15:7b:62:ba:8f:cf:94:de:e6:f1:f8:5e:8d:c9:81:c0:
         1a:ea:71:a6:9c:86:41:4b:69:dd:20:85:57:17:81:e2:59:46:
         21:cf:d4:c9:db:3e:45:c4:95:b1:31:74:6c:2d:4f:dd:24:9e:
         db:41:0a:65:f4:07:57:ec:e6:f1:46:19:10:41:4b:66:60:69:
         1e:ac:38:d5:e7:10:fc:bd:b4:8a:27:bf:36:bc:68:7a:9c:03:
         eb:f7:d6:98:f4:4d:42:ec:d4:0d:6b:41:86:ec:06:48:c7:55:
         3d:9c:d8:a7:20:78:3c:02:4f:21:1e:79:38:5d:8b:d9:c5:35:
         91:31:a0:e1:10:35:91:d6:80:fe:91:99:24:bf:55:b9:8d:dd:
         9a:f0:5a:b3:bb:a4:81:08:af:1a:27:76:79:80:b0:f0:c5:bd:
         27:04:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:17:58 2025 by rpki-client